[Webkit-unassigned] [Bug 26826] New: No response!

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jun 29 21:48:56 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=26826

           Summary: No response!
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows XP
            Status: UNCONFIRMED
          Severity: Critical
          Priority: P4
         Component: WebCore JavaScript
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: opensource at maxthon.net


please open
http://yinyue.kuwo.cn/yy/geshou-denglijun/%E9%82%93%E4%B8%BD%E5%90%9B_mv_1.htm
and click the link: [ÉÕÈâôÕ]. Safari will have no response.
In chrome I found it may be stack overflow.

backtrace is here in chrome:

!v8::internal::Runtime_StackGuard(v8::internal::Arguments args={...})  Line
4751        C++
        055b018b()      
        !v8::internal::Invoke(bool construct=false,
v8::internal::Handle<v8::internal::JSFunction> func={...},
v8::internal::Handle<v8::internal::Object> receiver={...}, int argc=1,
v8::internal::Object * * * args=0x01aaf2a8, bool *
has_pending_exception=0x01aaf237)  Line 93 + 0x34 bytes        C++
       
!v8::internal::Execution::Call(v8::internal::Handle<v8::internal::JSFunction>
func={...}, v8::internal::Handle<v8::internal::Object> receiver={...}, int
argc=1, v8::internal::Object * * * args=0x01aaf2a8, bool *
pending_exception=0x01aaf237)  Line 119 + 0x1f bytes        C++
        !v8::Function::Call(v8::Handle<v8::Object> recv={...}, int argc=1,
v8::Handle<v8::Value> * argv=0x01aaf2a8)  Line 2232 + 0x1d bytes     C++
        !WebCore::V8Proxy::CallFunction(v8::Handle<v8::Function>
function={...}, v8::Handle<v8::Object> receiver={...}, int argc=1,
v8::Handle<v8::Value> * args=0x01aaf2a8)  Line 1147 + 0x1f bytes    C++
        !WebCore::V8EventListener::callListenerFunction(v8::Handle<v8::Value>
jsEvent={...}, WebCore::Event * event=0x0aa23ce8, bool isWindowEvent=true) 
Line 86 + 0x26 bytes  C++
       
!WebCore::V8AbstractEventListener::invokeEventHandler(v8::Handle<v8::Context>
context={...}, WebCore::Event * event=0x0aa23ce8, v8::Handle<v8::Value>
jsEvent={...}, bool isWindowEvent=true)  Line 84 + 0x1f bytes     C++
        !WebCore::V8AbstractEventListener::handleEvent(WebCore::Event *
event=0x0aa23ce8, bool isWindowEvent=true)  Line 136    C++
        !WebCore::Document::handleWindowEvent(WebCore::Event *
event=0x0aa23ce8, bool useCapture=false)  Line 2778 + 0x20 bytes C++
        !WebCore::Node::dispatchWindowEvent(WTF::PassRefPtr<WebCore::Event>
e={...})  Line 2522 C++
        !WebCore::Node::dispatchWindowEvent(const WebCore::AtomicString &
eventType={...}, bool canBubbleArg=false, bool cancelableArg=false)  Line 2530 
      C++
        !WebCore::EventHandler::sendResizeEvent()  Line 2364    C++
        !WebCore::FrameView::performPostLayoutTasks()  Line 1115        C++
        !WebCore::FrameView::layout(bool allowSubtree=true)  Line 626   C++
        !WebCore::RenderWidget::updateWidgetPosition()  Line 262        C++
        !WebCore::RenderView::updateWidgetPositions()  Line 530 + 0xf bytes    
C++
        !WebCore::FrameView::performPostLayoutTasks()  Line 1099        C++
        !WebCore::FrameView::layout(bool allowSubtree=true)  Line 626   C++
        !WebCore::Document::updateLayout()  Line 1238   C++
        !WebCore::Document::updateLayoutIgnorePendingStylesheets()  Line 1270  
C++
        !WebCore::HTMLBodyElement::scrollHeight()  Line 286     C++
        !WebCore::ElementInternal::scrollHeightAttrGetter(v8::Local<v8::String>
name={...}, const v8::AccessorInfo & info={...})  Line 182 + 0x12 bytes C++
        !v8::internal::LoadCallbackProperty(v8::internal::Arguments args={...})
 Line 687 + 0x1e bytes  C++
        055b018b()      
        !v8::internal::Invoke(bool construct=false,
v8::internal::Handle<v8::internal::JSFunction> func={...},
v8::internal::Handle<v8::internal::Object> receiver={...}, int argc=1,
v8::internal::Object * * * args=0x01aaf9e8, bool *
has_pending_exception=0x01aaf977)  Line 93 + 0x34 bytes        C++
       
!v8::internal::Execution::Call(v8::internal::Handle<v8::internal::JSFunction>
func={...}, v8::internal::Handle<v8::internal::Object> receiver={...}, int
argc=1, v8::internal::Object * * * args=0x01aaf9e8, bool *
pending_exception=0x01aaf977)  Line 119 + 0x1f bytes        C++
        !v8::Function::Call(v8::Handle<v8::Object> recv={...}, int argc=1,
v8::Handle<v8::Value> * argv=0x01aaf9e8)  Line 2232 + 0x1d bytes     C++
        !WebCore::V8Proxy::CallFunction(v8::Handle<v8::Function>
function={...}, v8::Handle<v8::Object> receiver={...}, int argc=1,
v8::Handle<v8::Value> * args=0x01aaf9e8)  Line 1147 + 0x1f bytes    C++
        !WebCore::V8EventListener::callListenerFunction(v8::Handle<v8::Value>
jsEvent={...}, WebCore::Event * event=0x0aa23788, bool isWindowEvent=true) 
Line 86 + 0x26 bytes  C++
       
!WebCore::V8AbstractEventListener::invokeEventHandler(v8::Handle<v8::Context>
context={...}, WebCore::Event * event=0x0aa23788, v8::Handle<v8::Value>
jsEvent={...}, bool isWindowEvent=true)  Line 84 + 0x1f bytes     C++
        !WebCore::V8AbstractEventListener::handleEvent(WebCore::Event *
event=0x0aa23788, bool isWindowEvent=true)  Line 136    C++
        !WebCore::Document::handleWindowEvent(WebCore::Event *
event=0x0aa23788, bool useCapture=false)  Line 2778 + 0x20 bytes C++
        !WebCore::Node::dispatchWindowEvent(WTF::PassRefPtr<WebCore::Event>
e={...})  Line 2522 C++
        !WebCore::Node::dispatchWindowEvent(const WebCore::AtomicString &
eventType={...}, bool canBubbleArg=false, bool cancelableArg=false)  Line 2530 
      C++
        !WebCore::EventHandler::sendResizeEvent()  Line 2364    C++
        !WebCore::FrameView::performPostLayoutTasks()  Line 1115        C++
        !WebCore::FrameView::layout(bool allowSubtree=true)  Line 626   C++
        !WebCore::RenderWidget::updateWidgetPosition()  Line 262        C++
        !WebCore::RenderView::updateWidgetPositions()  Line 530 + 0xf bytes    
C++
        !WebCore::FrameView::performPostLayoutTasks()  Line 1099        C++
        !WebCore::FrameView::layout(bool allowSubtree=true)  Line 626   C++
        !WebCore::Document::updateLayout()  Line 1238   C++
        !WebCore::Document::updateLayoutIgnorePendingStylesheets()  Line 1270  
C++
        !WebCore::HTMLBodyElement::scrollHeight()  Line 286     C++
        !WebCore::ElementInternal::scrollHeightAttrGetter(v8::Local<v8::String>
name={...}, const v8::AccessorInfo & info={...})  Line 182 + 0x12 bytes C++
        !v8::internal::LoadCallbackProperty(v8::internal::Arguments args={...})
 Line 687 + 0x1e bytes  C++
        055b018b()      
        !v8::internal::Invoke(bool construct=false,
v8::internal::Handle<v8::internal::JSFunction> func={...},
v8::internal::Handle<v8::internal::Object> receiver={...}, int argc=1,
v8::internal::Object * * * args=0x01ab0128, bool *
has_pending_exception=0x01ab00b7)  Line 93 + 0x34 bytes        C++
       
!v8::internal::Execution::Call(v8::internal::Handle<v8::internal::JSFunction>
func={...}, v8::internal::Handle<v8::internal::Object> receiver={...}, int
argc=1, v8::internal::Object * * * args=0x01ab0128, bool *
pending_exception=0x01ab00b7)  Line 119 + 0x1f bytes        C++
        !v8::Function::Call(v8::Handle<v8::Object> recv={...}, int argc=1,
v8::Handle<v8::Value> * argv=0x01ab0128)  Line 2232 + 0x1d bytes     C++
        !WebCore::V8Proxy::CallFunction(v8::Handle<v8::Function>
function={...}, v8::Handle<v8::Object> receiver={...}, int argc=1,
v8::Handle<v8::Value> * args=0x01ab0128)  Line 1147 + 0x1f bytes    C++
        !WebCore::V8EventListener::callListenerFunction(v8::Handle<v8::Value>
jsEvent={...}, WebCore::Event * event=0x0aa23e78, bool isWindowEvent=true) 
Line 86 + 0x26 bytes  C++
       
!WebCore::V8AbstractEventListener::invokeEventHandler(v8::Handle<v8::Context>
context={...}, WebCore::Event * event=0x0aa23e78, v8::Handle<v8::Value>
jsEvent={...}, bool isWindowEvent=true)  Line 84 + 0x1f bytes     C++
        !WebCore::V8AbstractEventListener::handleEvent(WebCore::Event *
event=0x0aa23e78, bool isWindowEvent=true)  Line 136    C++
        !WebCore::Document::handleWindowEvent(WebCore::Event *
event=0x0aa23e78, bool useCapture=false)  Line 2778 + 0x20 bytes C++
        !WebCore::Node::dispatchWindowEvent(WTF::PassRefPtr<WebCore::Event>
e={...})  Line 2522 C++
        !WebCore::Node::dispatchWindowEvent(const WebCore::AtomicString &
eventType={...}, bool canBubbleArg=false, bool cancelableArg=false)  Line 2530 
      C++
        !WebCore::EventHandler::sendResizeEvent()  Line 2364    C++
        !WebCore::FrameView::performPostLayoutTasks()  Line 1115        C++
        !WebCore::FrameView::layout(bool allowSubtree=true)  Line 626   C++
        !WebCore::RenderWidget::updateWidgetPosition()  Line 262        C++
        !WebCore::RenderView::updateWidgetPositions()  Line 530 + 0xf bytes    
C++
        !WebCore::FrameView::performPostLayoutTasks()  Line 1099        C++
        !WebCore::FrameView::layout(bool allowSubtree=true)  Line 626   C++
        !WebCore::Document::updateLayout()  Line 1238   C++
        !WebCore::Document::updateLayoutIgnorePendingStylesheets()  Line 1270  
C++
        !WebCore::HTMLBodyElement::scrollHeight()  Line 286     C++
        !WebCore::ElementInternal::scrollHeightAttrGetter(v8::Local<v8::String>
name={...}, const v8::AccessorInfo & info={...})  Line 182 + 0x12 bytes C++
        !v8::internal::LoadCallbackProperty(v8::internal::Arguments args={...})
 Line 687 + 0x1e bytes  C++
        055b018b()      
        !v8::internal::Invoke(bool construct=false,
v8::internal::Handle<v8::internal::JSFunction> func={...},
v8::internal::Handle<v8::internal::Object> receiver={...}, int argc=1,
v8::internal::Object * * * args=0x01ab0868, bool *
has_pending_exception=0x01ab07f7)  Line 93 + 0x34 bytes        C++
       
!v8::internal::Execution::Call(v8::internal::Handle<v8::internal::JSFunction>
func={...}, v8::internal::Handle<v8::internal::Object> receiver={...}, int
argc=1, v8::internal::Object * * * args=0x01ab0868, bool *
pending_exception=0x01ab07f7)  Line 119 + 0x1f bytes        C++
        !v8::Function::Call(v8::Handle<v8::Object> recv={...}, int argc=1,
v8::Handle<v8::Value> * argv=0x01ab0868)  Line 2232 + 0x1d bytes     C++
        !WebCore::V8Proxy::CallFunction(v8::Handle<v8::Function>
function={...}, v8::Handle<v8::Object> receiver={...}, int argc=1,
v8::Handle<v8::Value> * args=0x01ab0868)  Line 1147 + 0x1f bytes    C++
        !WebCore::V8EventListener::callListenerFunction(v8::Handle<v8::Value>
jsEvent={...}, WebCore::Event * event=0x0aa23890, bool isWindowEvent=true) 
Line 86 + 0x26 bytes  C++
       
!WebCore::V8AbstractEventListener::invokeEventHandler(v8::Handle<v8::Context>
context={...}, WebCore::Event * event=0x0aa23890, v8::Handle<v8::Value>
jsEvent={...}, bool isWindowEvent=true)  Line 84 + 0x1f bytes     C++
        !WebCore::V8AbstractEventListener::handleEvent(WebCore::Event *
event=0x0aa23890, bool isWindowEvent=true)  Line 136    C++
        !WebCore::Document::handleWindowEvent(WebCore::Event *
event=0x0aa23890, bool useCapture=false)  Line 2778 + 0x20 bytes C++
        !WebCore::Node::dispatchWindowEvent(WTF::PassRefPtr<WebCore::Event>
e={...})  Line 2522 C++
        !WebCore::Node::dispatchWindowEvent(const WebCore::AtomicString &
eventType={...}, bool canBubbleArg=false, bool cancelableArg=false)  Line 2530 
      C++
        !WebCore::EventHandler::sendResizeEvent()  Line 2364    C++
        !WebCore::FrameView::performPostLayoutTasks()  Line 1115        C++
        !WebCore::FrameView::layout(bool allowSubtree=true)  Line 626   C++
        !WebCore::RenderWidget::updateWidgetPosition()  Line 262        C++
        !WebCore::RenderView::updateWidgetPositions()  Line 530 + 0xf bytes    
C++
        !WebCore::FrameView::performPostLayoutTasks()  Line 1099        C++
        !WebCore::FrameView::layout(bool allowSubtree=true)  Line 626   C++
        !WebCore::Document::updateLayout()  Line 1238   C++
        !WebCore::Document::updateLayoutIgnorePendingStylesheets()  Line 1270  
C++
        !WebCore::HTMLBodyElement::scrollHeight()  Line 286     C++
        !WebCore::ElementInternal::scrollHeightAttrGetter(v8::Local<v8::String>
name={...}, const v8::AccessorInfo & info={...})  Line 182 + 0x12 bytes C++
        !v8::internal::LoadCallbackProperty(v8::internal::Arguments args={...})
 Line 687 + 0x1e bytes  C++
        055b018b()      
        !v8::internal::Invoke(bool construct=false,
v8::internal::Handle<v8::internal::JSFunction> func={...},
v8::internal::Handle<v8::internal::Object> receiver={...}, int argc=1,
v8::internal::Object * * * args=0x01ab0fa8, bool *
has_pending_exception=0x01ab0f37)  Line 93 + 0x34 bytes        C++
       
!v8::internal::Execution::Call(v8::internal::Handle<v8::internal::JSFunction>
func={...}, v8::internal::Handle<v8::internal::Object> receiver={...}, int
argc=1, v8::internal::Object * * * args=0x01ab0fa8, bool *
pending_exception=0x01ab0f37)  Line 119 + 0x1f bytes        C++
        !v8::Function::Call(v8::Handle<v8::Object> recv={...}, int argc=1,
v8::Handle<v8::Value> * argv=0x01ab0fa8)  Line 2232 + 0x1d bytes     C++
        !WebCore::V8Proxy::CallFunction(v8::Handle<v8::Function>
function={...}, v8::Handle<v8::Object> receiver={...}, int argc=1,
v8::Handle<v8::Value> * args=0x01ab0fa8)  Line 1147 + 0x1f bytes    C++
        !WebCore::V8EventListener::callListenerFunction(v8::Handle<v8::Value>
jsEvent={...}, WebCore::Event * event=0x0aa21c80, bool isWindowEvent=true) 
Line 86 + 0x26 bytes  C++
       
!WebCore::V8AbstractEventListener::invokeEventHandler(v8::Handle<v8::Context>
context={...}, WebCore::Event * event=0x0aa21c80, v8::Handle<v8::Value>
jsEvent={...}, bool isWindowEvent=true)  Line 84 + 0x1f bytes     C++
        !WebCore::V8AbstractEventListener::handleEvent(WebCore::Event *
event=0x0aa21c80, bool isWindowEvent=true)  Line 136    C++
        !WebCore::Document::handleWindowEvent(WebCore::Event *
event=0x0aa21c80, bool useCapture=false)  Line 2778 + 0x20 bytes C++
        !WebCore::Node::dispatchWindowEvent(WTF::PassRefPtr<WebCore::Event>
e={...})  Line 2522 C++
        !WebCore::Node::dispatchWindowEvent(const WebCore::AtomicString &
eventType={...}, bool canBubbleArg=false, bool cancelableArg=false)  Line 2530 
      C++
        !WebCore::EventHandler::sendResizeEvent()  Line 2364    C++
        !WebCore::FrameView::performPostLayoutTasks()  Line 1115        C++
        !WebCore::FrameView::layout(bool allowSubtree=true)  Line 626   C++
        !WebCore::RenderWidget::updateWidgetPosition()  Line 262        C++
        !WebCore::RenderView::updateWidgetPositions()  Line 530 + 0xf bytes    
C++
        !WebCore::FrameView::performPostLayoutTasks()  Line 1099        C++
        !WebCore::FrameView::layout(bool allowSubtree=true)  Line 626   C++
        !WebCore::Document::updateLayout()  Line 1238   C++
        !WebCore::Document::updateLayoutIgnorePendingStylesheets()  Line 1270  
C++
        !WebCore::HTMLBodyElement::scrollHeight()  Line 286     C++
        !WebCore::ElementInternal::scrollHeightAttrGetter(v8::Local<v8::String>
name={...}, const v8::AccessorInfo & info={...})  Line 182 + 0x12 bytes C++
        !v8::internal::LoadCallbackProperty(v8::internal::Arguments args={...})
 Line 687 + 0x1e bytes  C++
        055b018b()      
......


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list